CVE-2023-3132

The CVE-2023-3132 issue affects the WordPress plugin MainWP Child . Vulnerable in versions up to and including 4.4.1.1 due to insufficient controls on the storage of backup files, enabling unauthenticated attackers to extract sensitive data such as the entire installation database when a backup e...

WordPress plugin MainWP Child 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

PT-2023-23291 · WordPress · Mainwp Child

Name of the Vulnerable Software and Affected Versions: MainWP Child plugin for WordPress versions up to, and including, 4.4.1.1 Description: The issue allows unauthenticated attackers to extract sensitive data, including the entire installation's database, due to insufficient controls on the...

WordPress MainWP Child Plugin <= 4.4.1.1 is vulnerable to Sensitive Data Exposure

Software MainWP Child Type Plugin Vulnerable versions = 4.4.1.1 Fixed in 4.4.1.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3132 Patch priority Low CVSS severity Low 7.5 Developer MainWP PSID 45016589de2f Credits Robert Lockwood Required privilege...

MainWP Child < 4.4.1.1 - Sensitive File Disclosure

The plugin uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files...

CVE-2023-23650

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in MainWP MainWP Code Snippets Extension plugin = 4.0.2 versions...

CVE-2023-23650

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in MainWP MainWP Code Snippets Extension plugin = 4.0.2 versions...

Cross site scripting

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in MainWP MainWP Code Snippets Extension plugin = 4.0.2 versions...

CVE-2023-23650 WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in MainWP MainWP Code Snippets Extension plugin = 4.0.2 versions...

CVE-2023-23650

Summary: CVE-2023-23650 affects the WordPress plugin MainWP Code Snippets Extension for versions

CVE-2023-23650 WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in MainWP MainWP Code Snippets Extension plugin = 4.0.2 versions...

PT-2023-19103 · Mainwp · Mainwp Code Snippets Extension

Name of the Vulnerable Software and Affected Versions: MainWP MainWP Code Snippets Extension plugin versions prior to 4.0.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by authenticated users with subscriber or higher...

CVE-2023-23659

Cross-Site Request Forgery CSRF vulnerability in MainWP Matomo Extension = 4.0.4 versions...

CVE-2023-23659

Cross-Site Request Forgery CSRF vulnerability in MainWP Matomo Extension = 4.0.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in MainWP Matomo Extension = 4.0.4 versions...

CVE-2023-23659 WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MainWP Matomo Extension = 4.0.4 versions...

CVE-2023-23659

CVE-2023-23659 affects the WordPress plugin MainWP Matomo Extension, versions

CVE-2023-23659 WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MainWP Matomo Extension = 4.0.4 versions...

WordPress Plugin MainWP Matomo Extension 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-19107 · Mainwp · Mainwp Matomo Extension

Name of the Vulnerable Software and Affected Versions: MainWP Matomo Extension versions prior to 4.0.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...